Malicious
ZIP Archive
MD5: df8bc6f8cfb3f03c4f1f0b838cb599f6
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 11:27 · 2 months ago
Last seen
2026-08-03 11:27 · 2 months ago
Last analysis
2026-08-03 11:27 · 2 months ago
Hashes
MD5
df8bc6f8cfb3f03c4f1f0b838cb599f6
Sha1
77136fd62644786631eea5e1ca7fa015dbe2e172
Sha256
77d36ae57387f0a681f9c9d461bcf3a14771c7bd626bce48b91237dcb8775f86
Sha384
7a97aab3f9ec74d8f46765f90079a87eb0b9c8da46cd865b67563ea1ad8f05d6d996451bc444bf769bbc5f487b1697eb
Sha512
686be4249fb9962c0bd4446c7ceedfed0151f6e75d9a07bf6eb6794366077d7ccf4fc14b3758581860eb50460276b9f5054e891b73134b8d5cbc390c1870186b
SSDeep
12:5jeM+A/YI6Xfr4cGU3Os2Sr5sMdoUUi761zuao6:9e/AwI6XfrRn+snrHdo/1Re6
TLSH
44F020360B384060D187C8B014C7AE9DA551B38160DEEB477F1BBCC516E9CB9D5AE4A9
3 malicious · 3 files
ZIPdf8bc6f8cfb3f03c4f1f0b838cb599f6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IRTXPT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential